CVSS: 5.0EPSS: 11%CPEs: 61EXPL: 0CVE-2005-2796
https://notcve.org/view.php?id=CVE-2005-2796
The sslConnectTimeout function in ssl.c for Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service (segmentation fault) via certain crafted requests. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/16977 http://secunia.com/advisories/17027 http://securitytracker.com/id?1014846 http://www.debian.org/security/2005/dsa-809 http://www.gentoo.org/security/en/glsa/glsa-200509-06.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:162 http://www.novell.com/linux/security/advisories/2005_21_sr.html http://www.novell.com/linux/security/advisories/2005_53_squid.html http://www.redhat •
CVSS: 6.4EPSS: 33%CPEs: 1EXPL: 0CVE-2005-1519
https://notcve.org/view.php?id=CVE-2005-1519
Squid 2.5 STABLE9 and earlier, when the DNS client port is unfiltered and the environment does not prevent IP spoofing, allows remote attackers to spoof DNS lookups. • http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/15294 http://www.debian.org/security/2005/dsa-751 http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/13592 http://www.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE9-dns_query http://www.vupen.com/english/advisories/2005/0521 https://oval.cisecurity.org/repository/search •
CVSS: 5.0EPSS: 7%CPEs: 58EXPL: 0CVE-2005-0718
https://notcve.org/view.php?id=CVE-2005-0718
Squid 2.5.STABLE7 and earlier allows remote attackers to cause a denial of service (segmentation fault) by aborting the connection during a (1) PUT or (2) POST request, which causes Squid to access previously freed memory. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 http://fedoranews.org/updates/FEDORA--.shtml http://secunia.com/advisories/12508 http://www.redhat.com/support/errata/RHSA-2005-415.html http://www.redhat.com/support/errata/RHSA-2005-489.html http://www.securityfocus.com/bid/13166 http://www.squid-cache.org/bugs/show_bug.cgi?id=1224 http://www1.uk.squid-cache.org/Versions/v2/2.5/bugs/#squid-2.5.STABLE7-post https://exchange.xforce.ibmcloud.co •
CVSS: 5.0EPSS: 95%CPEs: 59EXPL: 0CVE-2005-0446
https://notcve.org/view.php?id=CVE-2005-0446
Squid 2.5.STABLE8 and earlier allows remote attackers to cause a denial of service (crash) via certain DNS responses regarding (1) Fully Qualified Domain Names (FQDN) in fqdncache.c or (2) IP addresses in ipcache.c, which trigger an assertion failure. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 http://fedoranews.org/updates/FEDORA--.shtml http://marc.info/?l=bugtraq&m=110901183320453&w=2 http://secunia.com/advisories/14271 http://www.debian.org/security/2005/dsa-688 http://www.gentoo.org/security/en/glsa/glsa-200502-25.xml http://www.mandriva.com/security/advisories?name=MDKSA-2005:047 http://www.redhat.com/support/errata/RHSA-2005-173.html http://www.redhat.com/support/errata/RHSA-2005- •
CVSS: 5.0EPSS: 4%CPEs: 16EXPL: 0CVE-2005-0175
https://notcve.org/view.php?id=CVE-2005-0175
Squid 2.5 up to 2.5.STABLE7 allows remote attackers to poison the cache via an HTTP response splitting attack. • http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000931 http://fedoranews.org/updates/FEDORA--.shtml http://marc.info/?l=bugtraq&m=110780531820947&w=2 http://www.debian.org/security/2005/dsa-667 http://www.kb.cert.org/vuls/id/625878 http://www.mandriva.com/security/advisories?name=MDKSA-2005:034 http://www.novell.com/linux/security/advisories/2005_06_squid.html http://www.redhat.com/archives/fedora-announce-list/2005-May/msg00025.html http://www.redhat. •